CVE-2001-1474: Medium severity SSH ssh vulnerability
SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by poisoning the client's DNS cache.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1474?
CVE-2001-1474 has been classified as a high severity vulnerability due to its potential to redirect user connections to a malicious server.
How do I fix CVE-2001-1474?
To fix CVE-2001-1474, upgrade your SSH client to a version that includes host key checking for localhost connections.
Which versions of SSH are affected by CVE-2001-1474?
CVE-2001-1474 affects SSH versions before 2.0, specifically versions 1.2.24 through 1.2.31.
What is the risk of CVE-2001-1474 for users?
Users affected by CVE-2001-1474 may unknowingly connect to a malicious server due to DNS cache poisoning.
How does CVE-2001-1474 enable an attacker to exploit the system?
CVE-2001-1474 allows attackers to silently redirect SSH connections by manipulating the DNS resolution process.